NVD

Id
70939  
Name
CVE-2004-0503  
Description
Microsoft Outlook 2003 allows remote attackers to bypass the default zone restrictions and execute script within media files via a Rich Text Format (RTF) message containing an OLE object for the Windows Media Player, which bypasses Media Player's setting to disallow scripting and may lead to unprompted installation of an executable when exploited in conjunction with predictable-file-location exposures such as CVE-2004-0502.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2017-07-18  
Published
2004-08-18  
Modified Date
2017-07-10  
Seq
2004-0503  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
366085 70939 CVE-2004-0503 20040517 ROCKET SCIENCE: Outllook 2003  View
366086 70939 CVE-2004-0503 20040517 ROCKET SCIENCE: Outllook 2003  View
366087 70939 CVE-2004-0503 10369  View
366088 70939 CVE-2004-0503 outlook-ole-restriction-bypass(16173)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62861 JVNDB-2004-000203 Microsoft Outlook の RTF 形式の電子メールの処理におけるセキュリティ制限回避の脆弱性 Microsoft Outlook には、 RTF 形式の電子メールの取り扱いの不備のため、 Windows Media File を参照する OLE (Object Linking and Embedding) オブジェトが埋め込まれた RTF 形式の電子メールをプレビューした場合、ゾーンでのセキュリティ制限を回避してしまう脆弱性が存在します。 CVE-2004-0503 8930 CVE-2004-0503 70939 5 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000203.html 2004-05-18 2007-04-01 View